https://bugs.kde.org/show_bug.cgi?id=419677

            Bug ID: 419677
           Summary: Geolocation: Make it apparent to user whats happening
                    (third party contact, wifi SSID)
           Product: plasmashell
           Version: master
          Platform: Other
                OS: Linux
            Status: REPORTED
          Severity: major
          Priority: NOR
         Component: DataEngines
          Assignee: plasma-b...@kde.org
          Reporter: daniel-other+kde...@dadosch.de
  Target Milestone: 1.0

SUMMARY
Currently, a location request for example by the night color applets is
silently answered by using gpsd or mozillas geolocation service. In case of the
latter one, all (not hidden, no "_nomap") SSIDs are sent to mozilla.

It should be apparent to the user that a thirt-party request is made and that
the SSIDs are transmitted. I also doubt that the lines in the privacy policy
are correct here:
> As a general rule, software produced by the KDE Community does not collect, 
> transmit or otherwise transfer information from end-users devices except as a 
> result of an explicit user action. …
> In some instances, our software may also provide the option for periodic 
> automated checks, such as to check for new email or system software updates. 
> Where these periodic automatic checks do exist, the option will be provided 
> to disable them and only the minimum information needed to perform the 
> periodic check will be transmitted.

I propose that before any geolocation request is handled (wether answered by
gpsd or mozilla) a notification should be made to the user wether to accept the
request or deny it, with the option to trust this app (which will allow it to
request locations without confirmation). Specifially, this notification should
contain that mozilla's geolocation is used (including sending SSID names) and a
link to their privacy policy. 

Also a option to disable the mozilla geolocation (and only use gpsd) would be a
good idea. (I could find anything in plasmaengineexplorer)

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to